CVE-2022-50876

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> usb: musb: Fix musb_gadget.c rxstate overflow bug<br /> <br /> The usb function device call musb_gadget_queue() adds the passed<br /> request to musb_ep::req_list,If the (request-&gt;length &gt; musb_ep-&gt;packet_sz)<br /> and (is_buffer_mapped(req) return false),the rxstate() will copy all data<br /> in fifo to request-&gt;buf which may cause request-&gt;buf out of bounds.<br /> <br /> Fix it by add the length check :<br /> fifocnt = min_t(unsigned, request-&gt;length - request-&gt;actual, fifocnt);